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AMENDMENTS TO THE CLAIMS 



1. (Currently amended) A security module, characterized in that it has comprising: 

a data input port via which information eatt be is_input into the security modulei. ; -- i - ft4h a t 
the-seetmty-medttte ha s at l e a st two data output ports, whereby dat a c a n b e o u ^t-viar-a-fet-data 
output port and then transf e rred to an auth e ntication unit and wh e r e by data can b e output via a 
seeond - diita output port and then bo transferred to a document to bo issued, with at l e ast two 
combination machines (Kl , IC2), whereby 

a first combination machine (Kl ) generates including first means for generating and 
transferring a first r esult value for the v ia a first data output por t to an authentication unit: and 

whereby 

a second combination machine (K2--)-^©Ref-ateS "inc hiding second means for generating and 
tran sferring a second r esult value fef-fee -via a second data output por t to a document to be 

issued. 

wh erein the second result value is independent of any information in the document to be 

issued . 

2. (Currently amended) The security module according to Claim 1 , characterized ^^ 
that it has flirther comprising a secret generator that generates an unpredictable secret. 

3 . (Currently amended) The security module according to Claim 2, characterized in 
tbat -wherein t he secret generator is connected t o at least one of the first combination machine 

and/er - te - and the second combination machine in such a way that a -the unpredictable secret 
generated by the secret generator is introduced into one or more of the first combination machine 




-and t he second combination machine-(K2). 



4. 



(Currently amended) The security module according to 



of the 
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pfe-6€dfflg--e-te4ms-r6ha racte ri zed in that it has claim 1. further comprising an identification 
register, whereby 

wherein an output value of the identification register is connected provided to the first 
combination machine { - K -- l - ) - in such a manner that a value of the identification register is 
introduced into a data combination issued by the first combination machine. 

5 . (Currently amended) The security module according to on e o r mor e of the 
preceding claims, characteriz e d in that it has claim 1. furdier comprising at least one encryption 
machine that encrypts an output value of one of the first and second combination machines-(Kl). 

6. (Currently amended) The security module according to Claim 5, characterized in 
that th e -enepvpt i en - maeh i n e -is connected to further comprising a key registe r coupled to the at 

least one encryption machine , wh - ereby w herein at least one value contained in tiie key register 
e0fl-fe«-ifLused i^by the encryption machine for encryption purposes. 

7. (Currently amended) The security module according to efte-er-HMjre-e-f the 
preceding claims, characterized in lhat it has claim 1, further comprising a hash machine. 

8. (Currently amended) A method for producuig a^forgery-proof 

docutnents document to be issued, whereby input data is input the method co mprisin g : 

entering in put data hito a-data-an input port of a security modul e - aiMi - wbereby the - seeitfity 
m o du l e generat e s ; 

generating information m the security module t hat s e ns e s t o identify in di^ddual 
documents, characterized in that an individual document; 

combining t he input data is input into a data input port of a security module, where it is 
combined w ith data representing a secret; , and in that 



further processing the secret 
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combining-e 



t step; and 



acquiring data is acquired from the combination of the-data representing the secret and 

the input data^ 

wherein the combination of data representing the secret and the input data is determined 
independently from contents of tiie individual document . 

9. (Currently amended) The method according to Claim 8, characteriz e d in that the 

further comprising: 



outputting the farther processed secret it 



j -yia a first data output port^ and- m-that 



outputting data acquired from the combination of the-data representing the secret and the 
input data is ou^ut at a second data ou^ut port. 



10. (Currently amended) The method according to c 



e of th e pr e ceding 



elaims . c haracterized in that the of claim 8. fhrther comprising combining data representing the 

1 1. (Currently amended) The method according to Claim 10, eharaeterizcd in th at the 
further comprising irreversibly linlcing data representing the secret and the input data Bm 
irr eversibly linked t o each other, whereby this irrovorsiblo 

wherein said step of irreversibly linking is done in such a way that, exclusively when the 
same data is linked again in ^ie-a_same manner, an identical result is obtained, without allowing 
any conclusions about the temporary - secret. 



12. (Currently amended) The method according to c 



e of Claims 8 through 



1 1. characterized in that of claim 8. frirther comprising linking t he data representing the secret is 
fiirther linked w hile introducing data of an identification register. 
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13. (Currently amended) The method according to Claim 12, elmr-aeierized-iB-ihatAh^ 
further comprising encrypting a r esult of tfee-a_combination of the data representing the secret 
and #te-data of the identification registe r (ID) is oncryptod in an encryption machin o. 

14. (Currently amended) The method according to Claim 13, characterized in that the 
encryption takes place while further comprising, simultaneously carrying out said encrypting 
while introducing a key whose value is stored in a key register-(SR). 

15. (Currently amended) The melhod according to on e of mor e of Claims 8 through 
14; - eharaetorizod in that this of claim 9. further comprising transferring data that is ou^ut from 
the first data ou^ut port is transferred t o an authentication unit. 

1 6. (Currently amended) The melhod according to Claim 1 5, characterized in that the 
further comprising linking, through the authentication unit^i fefcs-the transferred data with 
another key. 

17. (Currently amended) The method a«e-0fd4ftg--t<>-efie-0f-i?KW-e-0f-4Ski¥HS--84-h^^ 
16. characterized in that of claim 9 wtoein said step of outputting data at t he data that is output 
fi=em-the second data output port is output as comprises outputting forgery-proof information to 
the forgery-proof documents to be issued. 

1 8. (New) The security module of claim 1 , wherein the first means for generating 
processes an unpredictable secret from a secret generator and an output value from an 
identification register. 

1 9. (New) The security module of claim 1 , wherein the second means for generating 
processes an unpredictable secret from a secret generator and information input via the data input 
port. 



20. 
comprising: 



(New) A security module for producing a forgery-proof document, the module 
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an identification register, a key register and a secret generator that generates an 

unpredictable secret; 

a first combination machine that combines an output of the identification register and an 
output of the secret generator; 

an encryption machine that encrypts an output of the first combination machine; 

a first outlet valve that outputs an encrypted output of tiie encryption machine via an 
authentication unit; 

a second combination machine that combines the unpredictable secret and input data 
received via an inlet valve; 

a hash machine tiiat generates an irreversible hash value responsive to an output of the 
second combination machine; and 

a second outlet valve that outputs the hash value, 

wherein tiie hash value is independent of contents of the forgery proof document. 

2 1 . (New) The security module of claim 20, further comprising a key register 
coupled to the encryption machine, wherein at least one value stored in the key register is used 
by the encryption machine to provide the encrypted output of the first combination machine. 

22. (New) A method for producing a forgery-proof document, the method 

comprising: 

using the security module of claim 18; and 

outputting the hash value from the second outlet valve as forgery-proof information to the 
forgery-proof document. 
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23 . (New) A method for producing a forgery-proof document, the method 

comprising: 

generating an unpredictable secret; 

combining an output of an identification register and the unpredictable secret; 

encrypting the combined output of the identification register and the unpredictable secret; 

outputting the encrypted combined output to an authentication unit; 

combining the secret and the input data input via an inlet valve; 

using the combined secret and input data to form an irreversible hash value; and 

outputting the hash value, 

wherein the hash value is independent of contents of the forgery proof document. 

24. (New) The method of claim 23, wherein said outputting comprises outputting the 
hash value to tiie forgery-proof document. 

25. (New) A security module useful for generating a digital franking mark, the 

module comprising: 

means for inputting information into the security module; 
a secret generator that generates an unpredictable secret; 

means for combining the unpredictable secret and the input information and producing 
combined data; 

hash generating means responsive to the combined data for generating and transferring 
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the digital franking mark to a letter to be mailed, 

wherein the generated digital franking mark is independent of contents of the letter to be 

mailed. 

26. (New) A security module suitable for communicating with an authentication unit, 
the module comprising: 

a secret generator that generates an unpredictable secret; 

means for combining an ou^ut of an identification register and the unpredictable secret; 

an encryption machine that provides an encrypted output responsive at least to the 
combined output of the identification register and the unpredictable secret; and 

means for outputting the encrypted output to the authentication unit. 

27. (New) The security module of claim 26, fiirther comprising a key register, 
wherein a value contained in Ihe key register is provided to Ihe encryption machine and used 
therein to provide the encrypted output. 
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